Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: w37Dycolylyu02tI+jtJSOFAyp3vSPH/mUCczk/dcIA=
Subject key identifier: 42:8F:8D:65:C2:D4:C5:8A:9A:50:4A:2E:62:DB:7D:B6:8D:48:04:15
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019CA9B3BBAC6B64FE8538FC93DE4B62C02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 0326
Signing time: Sun 01 Mar 2026 14:00:54 +0000
Manifest this update: Sun 01 Mar 2026 14:00:54 +0000
Manifest next update: Mon 02 Mar 2026 14:00:54 +0000
Files and hashes: 1: 2ZPAoDVMpQcEFj6ZwF6t3pvmnvE.roa (hash: 1rHNnFMhQDvJllSq2QAXfLYw1Y4xr+/L6lecMSt4yzM=)
2: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: OkuMq56TyEF56wckLpp1JgOa1i3wva3NykfmUrq2rMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:bb:ac:6b:64:fe:85:38:fc:93:de:4b:62:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Mar 1 14:00:54 2026 GMT
Not After : Mar 2 14:00:54 2026 GMT
Subject: CN=428f8d65c2d4c58a9a504a2e62db7db68d480415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a1:e3:45:9b:e9:e2:c8:cf:b5:f5:32:00:e8:
e3:f9:50:e1:01:85:6c:9e:ed:b6:75:a2:17:2a:2a:
02:e0:c3:ec:1c:d0:f6:a9:23:15:0d:60:7e:57:d1:
34:0d:6d:19:40:e0:40:81:8f:c9:27:87:57:50:cb:
05:77:fe:35:bc:4f:85:90:15:d3:d3:70:22:72:14:
e6:0d:87:6c:20:f1:b4:92:13:6d:f8:2b:f6:a7:6c:
09:74:49:10:b5:18:a8:32:fc:c5:de:f3:8c:99:b5:
e7:d9:c7:2d:81:03:c9:fe:6a:9e:e6:99:8b:2f:a5:
d6:a9:7e:cc:f2:eb:c7:8c:96:a6:85:c0:b6:91:a3:
91:f9:b0:4f:b1:3e:f8:ee:5d:39:6d:da:f3:45:8f:
be:8f:be:80:a0:b0:43:14:59:1f:44:46:22:e0:3b:
1a:46:fd:a9:d9:11:5a:df:45:c7:9e:d2:29:6c:e4:
9d:77:1a:89:18:9d:e9:9b:4c:95:8b:1a:6a:9e:eb:
21:07:90:f4:69:17:25:15:a5:01:07:8d:ff:df:8c:
ab:31:65:12:36:ef:b2:a2:9e:9b:93:a0:77:89:4c:
0e:5b:27:44:7e:23:d7:28:bb:a8:04:b8:a1:ba:85:
ef:ee:9c:3f:df:ea:ee:bb:40:18:f8:93:7d:95:01:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:8D:65:C2:D4:C5:8A:9A:50:4A:2E:62:DB:7D:B6:8D:48:04:15
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6a:90:3a:e9:18:5c:48:69:53:9f:4c:45:6f:09:4e:c2:a7:
47:af:2c:c6:ab:64:37:1d:22:0a:7e:38:d0:ba:04:57:07:7f:
2d:30:d7:ad:d2:e3:d4:9a:29:f4:b3:64:1f:c5:a1:45:f1:9b:
90:18:84:3d:67:be:86:df:9a:f7:2d:14:13:5b:10:14:65:74:
9d:7a:83:b2:2d:ad:20:7c:5c:8e:1e:cd:52:5b:43:d2:f4:85:
b0:c1:c0:21:26:38:07:80:66:af:4d:a0:82:67:14:7c:f9:cc:
a6:74:42:fd:54:59:e8:8c:1b:3a:a8:5e:08:76:c8:42:0b:78:
80:88:cd:d4:e6:de:7d:36:30:ce:97:fc:ca:fd:81:67:4b:5b:
b3:61:26:2f:f1:d8:15:ac:ad:09:31:c9:2c:62:b7:66:f8:7a:
40:4b:b1:88:61:fb:91:b1:41:e6:e7:01:23:56:ed:1b:99:47:
78:5d:1c:2b:70:fb:e3:15:31:38:91:90:ca:7b:7d:f7:36:be:
b3:0a:2b:2e:64:63:67:00:c2:3f:a4:66:05:90:e2:18:43:3b:
a9:26:6f:62:72:85:39:aa:60:71:04:cb:80:2b:87:30:c2:63:
4c:7e:56:53:df:4b:06:31:56:3c:4a:1d:d0:7b:80:0a:c2:59:
0a:f4:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:37 2026 by rpki-client